Vulnerabilities > Nasm > Netwide Assembler > High

DATE CVE VULNERABILITY TITLE RISK
2018-03-20 CVE-2018-8881 Out-of-bounds Read vulnerability in multiple products
Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, related to an unterminated string.
local
low complexity
nasm canonical CWE-125
7.3
2017-12-21 CVE-2017-17818 Out-of-bounds Read vulnerability in multiple products
In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a while loop in paste_tokens in asm/preproc.c.
network
low complexity
nasm canonical CWE-125
7.5
2017-07-08 CVE-2017-11111 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
local
low complexity
nasm canonical CWE-119
7.8
2017-06-29 CVE-2017-10686 Use After Free vulnerability in multiple products
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm.
local
low complexity
nasm canonical CWE-416
7.8